Add KRB5-PADATA-PK-AS-09-BINDING, client send this (with an empty

pa-data.padata-value) to tell the KDC that the client support the
binding the PA-REP to the AS-REQ packet. This is to fix the problem
lack of binding the AS-REQ to the PK-AS-REP in pre PK-INIT-27. The
nonce is replaced with a asCheckSum.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15943 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2005-08-22 19:09:25 +00:00
parent 825cc1ee2a
commit 6c2304642e

View File

@@ -68,7 +68,11 @@ PADATA-TYPE ::= INTEGER {
KRB5-PADATA-TD-APP-DEFINED-ERROR(106), -- application specific
KRB5-PADATA-TD-REQ-NONCE(107), -- INTEGER
KRB5-PADATA-TD-REQ-SEQ(108), -- INTEGER
KRB5-PADATA-PA-PAC-REQUEST(128) -- jbrezak@exchange.microsoft.com
KRB5-PADATA-PA-PAC-REQUEST(128), -- jbrezak@exchange.microsoft.com
KRB5-PADATA-PK-AS-09-BINDING(132) -- client send this to
-- tell KDC that is supports
-- the asCheckSum in the
-- PK-AS-REP
}
AUTHDATA-TYPE ::= INTEGER {